El vie, 27 de 08 de 2004 a las 00:17, Nick Drage escribiÃ: > Hi, > > Any ideas why this would be failing? It's the example straight out of > the documentation: > > host# iptables -A INPUT -m string --string 'cmd.exe' -j QUEUE > iptables: No chain/target/match by that name > > This is on a Debian Stable box. Is it possible that "-m string" is > permitted by the userspace tool but the functionality hasn't been > included in the kernel? It can be in the userspace iptables, lack of string support in the kernel or both. If it's in the kernel you should have the module loaded or at least in your /lib/modules directory. If you have the kernel support then it's probably an userspace problem. -- Jose Maria Lopez Hernandez Director Tecnico de bgSEC jkerouac@xxxxxxxxx bgSEC Seguridad y Consultoria de Sistemas Informaticos http://www.bgsec.com ESPAÃA The only people for me are the mad ones -- the ones who are mad to live, mad to talk, mad to be saved, desirous of everything at the same time, the ones who never yawn or say a commonplace thing, but burn, burn, burn like fabulous yellow Roman candles. -- Jack Kerouac, "On the Road"